SNMP and Syslog

A network engineer configures SNMPv2c on a Cisco router to monitor CPU and memory utilization. The NMS is reachable and configured with the same community string 'public'. However, the NMS receives no traps from the router. The engineer verifies that the router's SNMP configuration includes 'snmp-server enable traps' and 'snmp-server host 192.168.1.100 version 2c public'. What is the most likely cause of the missing traps?

An engineer is troubleshooting a syslog issue on a Cisco switch. The switch is configured with 'logging host 10.1.1.1' and 'logging trap informational'. The syslog server at 10.1.1.1 receives messages from other devices but not from this switch. The engineer can ping 10.1.1.1 from the switch. What is the most likely cause?

A network engineer configures SNMPv3 on a Cisco router for secure monitoring. The configuration includes 'snmp-server group ADMIN v3 priv', 'snmp-server user admin ADMIN v3 auth sha cisco123 priv aes 128 cisco456', and 'snmp-server host 10.1.1.2 version 3 priv admin'. The NMS is configured with the same credentials. However, the NMS cannot poll the router. The engineer verifies that the router's SNMP agent is enabled. What is the most likely cause?

An engineer notices that syslog messages from a Cisco router are not timestamped correctly. The router is configured with 'service timestamps log datetime msec' and 'logging host 10.1.1.1'. The syslog server shows messages with the correct time but the local logs on the router show incorrect timestamps. What is the most likely cause?

A network engineer configures SNMPv2c on a Cisco switch to send traps to an NMS at 192.168.1.100 with community 'monitor'. The engineer also configures 'snmp-server enable traps snmp linkdown linkup'. The NMS receives link traps but not authentication failure traps. The engineer has not configured any access control. What is the most likely reason?

An engineer is configuring syslog on a Cisco router to send messages to two servers: 10.1.1.1 (primary) and 10.1.1.2 (secondary). The configuration includes 'logging host 10.1.1.1' and 'logging host 10.1.1.2'. The engineer wants messages to be sent to both servers simultaneously. However, only the first server receives messages. What is the most likely cause?

A network engineer configures SNMPv3 on a Cisco router with the following: 'snmp-server group GRP v3 priv', 'snmp-server user usr GRP v3 auth sha pass1 priv aes 128 pass2'. The NMS is configured with the same credentials. However, the NMS cannot perform SNMP walks. The engineer notices that the router's SNMP agent is responding to queries from other devices. What is the most likely cause?

An engineer configures syslog on a Cisco router with 'logging host 10.1.1.1' and 'logging trap warnings'. The engineer wants to receive only messages with severity warning (4) and higher (0-4). However, the syslog server receives messages with severity debug (7). What is the most likely cause?

A network engineer configures SNMPv2c on a Cisco switch to send traps to an NMS. The engineer uses 'snmp-server community public RO' and 'snmp-server host 10.1.1.1 version 2c public'. The NMS receives traps, but the engineer notices that the traps contain the IP address of the management interface (VLAN 1) instead of the loopback interface (Loopback0) that is used for management. The engineer wants the traps to use the loopback IP as the source. What should the engineer do?

A network engineer runs the following command on Router R1: R1# show ip ospf neighbor Neighbor ID Pri State Dead Time Address Interface 192.168.1.2 1 FULL/DR 00:00:38 10.0.0.2 GigabitEthernet0/0 192.168.1.3 1 2WAY/DROTHER 00:00:32 10.0.0.3 GigabitEthernet0/0 Based on this output, what can be concluded?

A network engineer runs the following command on Switch SW1: SW1# show vlan brief VLAN Name Status Ports ---- -------------------------------- --------- ------------------------------- 1 default active Gi0/1, Gi0/2, Gi0/3 10 Sales active Gi0/4, Gi0/5 20 Engineering active Gi0/6 1002 fddi-default act/unsup 1003 token-ring-default act/unsup 1004 fddinet-default act/unsup 1005 trnet-default act/unsup Based on this output, what can be concluded?

A network engineer runs the following command on Router R2: R2# show ip bgp summary BGP router identifier 10.0.0.2, local AS number 65002 BGP table version is 10, main routing table version 10 4 network entries using 576 bytes of memory 4 path entries using 320 bytes of memory 3/2 BGP path/bestpath attribute entries using 456 bytes of memory 1 BGP AS-PATH entries using 24 bytes of memory 0 BGP route-map cache entries using 0 bytes of memory 0 BGP filter-list cache entries using 0 bytes of memory BGP using 1376 total bytes of memory BGP activity 6/2 prefixes, 6/2 paths, scan interval 60 secs Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd 192.168.1.1 4 65001 1024 1020 10 0 0 02:15:30 3 192.168.1.3 4 65003 0 0 0 0 0 00:00:12 Idle (Admin) Based on this output, what can be concluded?

A network engineer runs the following command on Router R3: R3# show interfaces GigabitEthernet0/0 GigabitEthernet0/0 is up, line protocol is up Hardware is ISR4331-2x1GE, address is aabb.cc00.0300 (bia aabb.cc00.0300) Internet address is 10.0.0.3/24 MTU 1500 bytes, BW 1000000 Kbit/sec, DLY 10 usec, reliability 255/255, txload 1/255, rxload 1/255 Encapsulation ARPA, loopback not set Keepalive set (10 sec) Full-duplex, 1000Mb/s, media type is RJ45 output flow-control is unsupported, input flow-control is unsupported ARP type: ARPA, ARP Timeout 04:00:00 Last input 00:00:00, output 00:00:00, output hang never Last clearing of "show interface" counters never Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0 Queueing strategy: fifo Output queue: 0/40 (size/max) 5 minute input rate 1000 bits/sec, 2 packets/sec 5 minute output rate 2000 bits/sec, 3 packets/sec 12345 packets input, 1234567 bytes, 0 no buffer Received 123 broadcasts (0 IP multicasts) 0 runts, 0 giants, 0 throttles 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored 0 watchdog, 0 multicast, 0 pause input 12345 packets output, 2345678 bytes, 0 underruns 0 output errors, 0 collisions, 1 interface resets 0 unknown protocol drops 0 babbles, 0 late collision, 0 deferred 0 lost carrier, 0 no carrier, 0 pause output 0 output buffer failures, 0 output buffers swapped out Based on this output, what can be concluded?

A network engineer runs the following command on Switch SW2: SW2# show spanning-tree vlan 10 VLAN0010 Spanning tree enabled protocol ieee Root ID Priority 32778 Address aabb.cc00.0100 Cost 19 Port 1 (GigabitEthernet0/1) Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec Bridge ID Priority 32778 (priority 32768 sys-id-ext 10) Address aabb.cc00.0200 Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec Aging Time 300 sec Interface Role Sts Cost Prio.Nbr Type ------------------- ---- --- --------- -------- -------------------------------- Gi0/1 Root FWD 19 128.1 P2p Gi0/2 Altn BLK 19 128.2 P2p Gi0/3 Desg FWD 19 128.3 P2p Based on this output, what can be concluded?

A network engineer runs the following command on Switch SW3: SW3# show etherchannel summary Flags: D - down P - in port-channel I - stand-alone s - suspended H - Hot-standby (LACP only) R - Layer3 S - Layer2 U - in use N - not in use, no aggregation f - failed to allocate aggregator M - not in use, minimum links not met u - unsuitable for bundling w - waiting to be aggregated d - default port Number of channel-groups in use: 1 Number of aggregators: 1 Group Port-channel Protocol Ports ------+-------------+-----------+--------------------------------------------- 1 Po1(SU) LACP Gi0/1(P) Gi0/2(P) Gi0/3(D) Based on this output, what can be concluded?

A network engineer runs the following command on Router R4: R4# show ip nat translations Pro Inside global Inside local Outside local Outside global --- 192.168.1.10:1024 10.0.0.10:1024 203.0.113.5:80 203.0.113.5:80 tcp 192.168.1.10:1024 10.0.0.10:1024 203.0.113.5:80 203.0.113.5:80 --- 192.168.1.11:2048 10.0.0.11:2048 198.51.100.2:443 198.51.100.2:443 Based on this output, what can be concluded?

A network engineer runs the following command on Router R5: R5# show mpls ldp neighbor Peer LDP Ident: 10.0.0.2:0, Local LDP Ident: 10.0.0.5:0 TCP connection: 10.0.0.2.646 - 10.0.0.5.646 State: Oper; Msgs sent/rcvd: 123/120; Downstream Up time: 01:23:45 LDP discovery sources: GigabitEthernet0/0, Src IP addr: 10.0.1.2 Addresses bound to peer LDP Ident: 10.0.0.2 10.0.1.2 192.168.1.1 Based on this output, what can be concluded?

A network engineer runs the following command on Router R6: R6# show ip pim neighbor PIM Neighbor Table Mode: B - Bidir Capable, DR - Designated Router, N - Default DR Priority, S - State Refresh Capable, G - GenID Capable, L - DR Load Balancing Capable Neighbor Address Interface Uptime Expires Mode 10.0.0.2 GigabitEthernet0/0 02:15:30 00:01:25 DR (DR) 10.0.0.3 GigabitEthernet0/0 02:15:28 00:01:27 B S Based on this output, what can be concluded?

Given the following SNMP configuration on a Cisco IOS-XE router: snmp-server community public RO snmp-server community private RW snmp-server location Building-A snmp-server contact admin@example.com snmp-server enable traps snmp linkdown linkup snmp-server host 192.168.1.100 version 2c public What is the effect of this configuration?

Consider the following partial syslog configuration on a Cisco IOS-XE switch: logging host 10.10.10.1 transport udp port 514 logging trap 6 logging source-interface Loopback0 logging on Which statement is true about this configuration?

Given the following SNMPv3 configuration on a Cisco IOS-XE router: snmp-server group ADMIN v3 priv write ADMINVIEW snmp-server user admin ADMIN v3 auth sha cisco123 priv aes 128 cisco456 snmp-server view ADMINVIEW iso included What is missing or incorrect in this configuration?

Examine this SNMP configuration snippet from a Cisco IOS-XE router: snmp-server community MyComm RO 10 access-list 10 permit 192.168.1.0 0.0.0.255 What is the effect of this configuration?

Given the following syslog configuration on a Cisco IOS-XE router: logging buffered 4096 warnings logging console warnings logging monitor warnings logging trap warnings Which statement is true?

Consider this SNMP configuration on a Cisco IOS-XE switch: snmp-server community public RO snmp-server community private RW snmp-server ifindex persist What is the purpose of the 'snmp-server ifindex persist' command?

What is the default syslog severity level for console logging on a Cisco IOS device?

Which SNMP version introduced the use of a username and authentication/password framework, without encryption?

What is the default SNMP trap port number?

Drag and drop the steps of SNMP trap generation and forwarding into the correct order, from first to last.

Drag and drop the steps of syslog message generation and storage into the correct order, from first to last.

Drag and drop the steps of SNMPv3 secure agent configuration into the correct order, from first to last.

Drag and drop the steps of SNMPv3 authentication and privacy negotiation into the correct order, from first to last.

Drag and drop the steps of SNMP community-based access control setup into the correct order, from first to last.

Drag and drop the steps of Syslog severity filtering and rate-limiting configuration into the correct order, from first to last.

Drag and drop the steps of SNMP bulk walk operation process into the correct order, from first to last.

Drag and drop the steps of Netconf/Yang-based device monitoring subscription into the correct order, from first to last.

Drag and drop the steps of SNMPv3 authentication and privacy negotiation into the correct order, from first to last.

Drag and drop the steps of SNMP community-based access control setup into the correct order, from first to last.

Drag and drop the steps of Syslog severity filtering and rate-limiting configuration into the correct order, from first to last.

Drag and drop the steps of SNMP bulk walk operation process into the correct order, from first to last.

Drag and drop the steps of Netconf/Yang-based device monitoring subscription into the correct order, from first to last.

Drag and drop each SNMP version on the left to its matching security feature on the right.

Drag and drop each SNMP operation on the left to its matching direction on the right.

Drag and drop each SNMPv3 security level on the left to its matching protection description on the right.

Drag and drop each syslog severity level on the left to its matching numeric value on the right.

Drag and drop each SNMP component on the left to its matching role on the right.

Drag and drop each SNMP version on the left to its matching security feature on the right.

Drag and drop each SNMP operation on the left to its matching direction on the right.

Drag and drop each SNMPv3 security level on the left to its matching protection description on the right.

Drag and drop each syslog severity level on the left to its matching severity number on the right.

Drag and drop each SNMP component on the left to its matching role on the right.

Which two statements about SNMPv3 security models are true? (Choose two.)

Which three statements about Syslog severity levels are true? (Choose three.)

Which three statements about SNMP trap and inform operations are true? (Choose three.)

Which two statements about SNMP MIB objects and OIDs are true? (Choose two.)

Which two statements about SNMPv3 security features are true? (Choose two.)

Which three statements about syslog message severity levels are correct? (Choose three.)

Which two statements about SNMP trap and inform operations are true? (Choose two.)

Which three statements about syslog configuration on Cisco IOS devices are true? (Choose three.)